Stale-approval exposure on deprecated router

Compound V3 (Comet)'s assessment for RD-F-168 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No explicitly deprecated V3 router contract identified. Compound V3 users interact directly with Comet proxy addresses — no intermediary router layer exists in the V3 architecture. The specific condition (deprecated router with stale approvals) does not apply to V3's direct-proxy architecture. V2 cToken contracts exist but V2 is not deprecated. Scored gray because factor condition is N/A for V3.

Sources #

Docs
https://docs.compound.finance/retrieved 2026-04-28
Docs
https://docs.compound.finance/v2/governance/retrieved 2026-04-28

Methodology #

Count the number of active user approvals (ERC-20 `allowance`) to deprecated router or protocol contracts.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol compound-v3 factor RD-F-168 score gray collected_at 2026-04-28 00:20:50